Red Hat Security Advisory: qemu-kvm-rhev security update

Fixed packages 5

Vulnerabilities 2

• Unscored —
  CVE-2019-20382

  QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz …

  qemu qemu Debian Ubuntu
  Mar 5, 2020
• Unscored —
  CVE-2020-14364 Public exploit

  An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue …

  qemu qemu xen qemu Virtualization Debian Ubuntu Alpine
  Aug 31, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1810390
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1856805
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1869201
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4167.json
• report
  https://access.redhat.com/security/cve/CVE-2019-20382
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-20382
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-20382
• article
  https://www.openwall.com/lists/oss-security/2020/03/05/1
• report
  https://access.redhat.com/security/cve/CVE-2020-14364
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14364
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14364
• article
  https://www.openwall.com/lists/oss-security/2020/08/24/2
• article
  https://www.openwall.com/lists/oss-security/2020/08/24/3